# Vulnerabilities published in 2023


- [CVE-2023-20128](https://insights.sbomify.com/CVE-2023-20128/): Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities (high 7.2)
- [CVE-2023-20127](https://insights.sbomify.com/CVE-2023-20127/): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities (medium 6.5)
- [CVE-2023-20126](https://insights.sbomify.com/CVE-2023-20126/): Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability (critical 9.8)
- [CVE-2023-20125](https://insights.sbomify.com/CVE-2023-20125/): Cisco BroadWorks Network Server TCP Denial of Service Vulnerability (high 8.6)
- [CVE-2023-20124](https://insights.sbomify.com/CVE-2023-20124/): Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability (medium 6.5)
- [CVE-2023-20123](https://insights.sbomify.com/CVE-2023-20123/): Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability (medium 6.3)
- [CVE-2023-20122](https://insights.sbomify.com/CVE-2023-20122/): Command injection in Cisco Identity Services Engine Software (medium 6.0)
- [CVE-2023-20121](https://insights.sbomify.com/CVE-2023-20121/): Command injection in Cisco Identity Services Engine Software (medium 6.0)
- [CVE-2023-20120](https://insights.sbomify.com/CVE-2023-20120/): Cross-site scripting in Cisco Web Security Appliance (WSA) (medium 5.4)
- [CVE-2023-20119](https://insights.sbomify.com/CVE-2023-20119/): Cross-site scripting in Cisco Secure Email and Web Manager (medium 6.1)
- [CVE-2023-20118](https://insights.sbomify.com/CVE-2023-20118/): Cisco Small Business RV Series Routers Command Injection (medium 6.5, exploited in the wild)
- [CVE-2023-20117](https://insights.sbomify.com/CVE-2023-20117/): Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities (high 7.2)
- [CVE-2023-20116](https://insights.sbomify.com/CVE-2023-20116/): Denial of service in Cisco Unified Communications Manager (medium 6.8)
- [CVE-2023-20115](https://insights.sbomify.com/CVE-2023-20115/): Privilege escalation in Cisco NX-OS Software (medium 5.4)
- [CVE-2023-20114](https://insights.sbomify.com/CVE-2023-20114/): Path traversal in Cisco Firepower Management Center (medium 6.5)
- [CVE-2023-20113](https://insights.sbomify.com/CVE-2023-20113/): Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability (medium 6.5)
- [CVE-2023-20112](https://insights.sbomify.com/CVE-2023-20112/): Cisco Access Point Software Association Request Denial of Service Vulnerability (high 7.4)
- [CVE-2023-20111](https://insights.sbomify.com/CVE-2023-20111/): Information disclosure in Cisco Identity Services Engine Software (medium 6.5)
- [CVE-2023-20110](https://insights.sbomify.com/CVE-2023-20110/): Cisco Smart Software Manager On-Prem SQL Injection Vulnerability (medium 6.5)
- [CVE-2023-20109](https://insights.sbomify.com/CVE-2023-20109/): Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write (medium 6.6, exploited in the wild)
- [CVE-2023-20108](https://insights.sbomify.com/CVE-2023-20108/): Denial of service in Cisco Unified Communications Manager IM and Presence Service (high 7.5)
- [CVE-2023-20107](https://insights.sbomify.com/CVE-2023-20107/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability (medium 5.3)
- [CVE-2023-20106](https://insights.sbomify.com/CVE-2023-20106/): Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities (medium 5.4)
- [CVE-2023-20105](https://insights.sbomify.com/CVE-2023-20105/): Privilege escalation in Cisco TelePresence Video Communication Server (VCS) Expressway (critical 9.6)
- [CVE-2023-20104](https://insights.sbomify.com/CVE-2023-20104/): Cisco Webex App for Web Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2023-20103](https://insights.sbomify.com/CVE-2023-20103/): Cisco Secure Network Analytics Remote Code Execution Vulnerability (medium 4.9)
- [CVE-2023-20102](https://insights.sbomify.com/CVE-2023-20102/): Cisco Secure Network Analytics Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-20101](https://insights.sbomify.com/CVE-2023-20101/): Hardcoded credentials in Cisco Emergency Responder (critical 9.8)
- [CVE-2023-20100](https://insights.sbomify.com/CVE-2023-20100/): Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability (medium 6.8)
- [CVE-2023-2010](https://insights.sbomify.com/CVE-2023-2010/): Forminator < 1.24.1 - Unauthenticated Race Condition on poll vote (low 3.1)
- [CVE-2023-20098](https://insights.sbomify.com/CVE-2023-20098/): Path traversal in Cisco SD-WAN vManage (medium 4.4)
- [CVE-2023-20097](https://insights.sbomify.com/CVE-2023-20097/): Cisco Access Point Software Command Injection Vulnerability (medium 4.6)
- [CVE-2023-20096](https://insights.sbomify.com/CVE-2023-20096/): Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2023-20095](https://insights.sbomify.com/CVE-2023-20095/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2023-20094](https://insights.sbomify.com/CVE-2023-20094/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability (medium 4.3)
- [CVE-2023-20093](https://insights.sbomify.com/CVE-2023-20093/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability (medium 4.4)
- [CVE-2023-20092](https://insights.sbomify.com/CVE-2023-20092/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability (medium 4.4)
- [CVE-2023-20091](https://insights.sbomify.com/CVE-2023-20091/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability (medium 5.1)
- [CVE-2023-20090](https://insights.sbomify.com/CVE-2023-20090/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability (medium 6.7)
- [CVE-2023-2009](https://insights.sbomify.com/CVE-2023-2009/): Pretty Url <= 1.5.4 - Admin+ Stored XSS in plugin settings (medium 4.8)
- [CVE-2023-20089](https://insights.sbomify.com/CVE-2023-20089/): Denial of service in Cisco NX-OS System Software in ACI Mode (high 7.4)
- [CVE-2023-20088](https://insights.sbomify.com/CVE-2023-20088/): Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability (medium 5.3)
- [CVE-2023-20087](https://insights.sbomify.com/CVE-2023-20087/): Cisco Identity Services Engine Arbitrary File Download Vulnerabilities (medium 4.9)
- [CVE-2023-20086](https://insights.sbomify.com/CVE-2023-20086/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2023-20085](https://insights.sbomify.com/CVE-2023-20085/): Cross-site scripting in Cisco Identity Services Engine Software (medium 6.1)
- [CVE-2023-20084](https://insights.sbomify.com/CVE-2023-20084/): Security feature bypass in Cisco Secure Endpoint (medium 5.0)
- [CVE-2023-20083](https://insights.sbomify.com/CVE-2023-20083/): Denial of service in Cisco Firepower Threat Defense Software (high 8.6)
- [CVE-2023-20082](https://insights.sbomify.com/CVE-2023-20082/): Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability (medium 6.1)
- [CVE-2023-20081](https://insights.sbomify.com/CVE-2023-20081/): Memory corruption in Cisco IOS (medium 6.8)
- [CVE-2023-20080](https://insights.sbomify.com/CVE-2023-20080/): Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability (high 8.6)
- [CVE-2023-2008](https://insights.sbomify.com/CVE-2023-2008/): Kernel: udmabuf: improper validation of array index leading to local privilege escalation (high 8.2)
- [CVE-2023-20079](https://insights.sbomify.com/CVE-2023-20079/): Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities (critical 9.8)
- [CVE-2023-20078](https://insights.sbomify.com/CVE-2023-20078/): Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities (critical 9.8)
- [CVE-2023-20077](https://insights.sbomify.com/CVE-2023-20077/): Cisco Identity Services Engine Arbitrary File Download Vulnerabilities (medium 4.9)
- [CVE-2023-20076](https://insights.sbomify.com/CVE-2023-20076/): Cisco IOx Application Hosting Environment Command Injection Vulnerability (high 7.2)
- [CVE-2023-20075](https://insights.sbomify.com/CVE-2023-20075/): Command injection in Cisco Secure Email (medium 6.0)
- [CVE-2023-20074](https://insights.sbomify.com/CVE-2023-20074/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2023-20073](https://insights.sbomify.com/CVE-2023-20073/): Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability (medium 5.3)
- [CVE-2023-20072](https://insights.sbomify.com/CVE-2023-20072/): Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability (high 8.6)
- [CVE-2023-20071](https://insights.sbomify.com/CVE-2023-20071/): Security feature bypass in Cisco Cyber Vision (medium 5.8)
- [CVE-2023-20070](https://insights.sbomify.com/CVE-2023-20070/): Denial of service in Cisco Firepower Threat Defense Software (medium 4.0)
- [CVE-2023-2007](https://insights.sbomify.com/CVE-2023-2007/): Race condition in Linux kernel's DPT I2O Controller driver (high 7.8)
- [CVE-2023-20069](https://insights.sbomify.com/CVE-2023-20069/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2023-20068](https://insights.sbomify.com/CVE-2023-20068/): Cisco Prime Infrastructure Reflected Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2023-20067](https://insights.sbomify.com/CVE-2023-20067/): Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability (high 7.4)
- [CVE-2023-20066](https://insights.sbomify.com/CVE-2023-20066/): Cisco IOS XE Software Web UI Path Traversal Vulnerability (medium 6.5)
- [CVE-2023-20065](https://insights.sbomify.com/CVE-2023-20065/): Privilege escalation in Cisco IOS XE Software (high 7.8)
- [CVE-2023-20064](https://insights.sbomify.com/CVE-2023-20064/): Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability (medium 4.6)
- [CVE-2023-20063](https://insights.sbomify.com/CVE-2023-20063/): Cisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center Code Injection Vulnerability (high 8.2)
- [CVE-2023-20062](https://insights.sbomify.com/CVE-2023-20062/): Cisco Unified Intelligence Center Vulnerabilities (medium 6.5)
- [CVE-2023-20061](https://insights.sbomify.com/CVE-2023-20061/): Cisco Unified Intelligence Center Vulnerabilities (medium 6.5)
- [CVE-2023-20060](https://insights.sbomify.com/CVE-2023-20060/): Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2023-2006](https://insights.sbomify.com/CVE-2023-2006/): Race condition in Linux kernel's RxRPC network protocol (high 7.0)
- [CVE-2023-20059](https://insights.sbomify.com/CVE-2023-20059/): Cisco DNA Center Information Disclosure Vulnerability (medium 4.3)
- [CVE-2023-20058](https://insights.sbomify.com/CVE-2023-20058/): Cross-site scripting in Cisco Packaged Contact Center Enterprise (medium 6.1)
- [CVE-2023-20057](https://insights.sbomify.com/CVE-2023-20057/): Security feature bypass in Cisco Email Security Appliance (ESA) (not scored)
- [CVE-2023-20056](https://insights.sbomify.com/CVE-2023-20056/): Cisco Access Point Software Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-20055](https://insights.sbomify.com/CVE-2023-20055/): Cisco DNA Center Privilege Escalation Vulnerability (high 8.0)
- [CVE-2023-20053](https://insights.sbomify.com/CVE-2023-20053/): Cross-site scripting in Cisco Nexus Dashboard (medium 6.1)
- [CVE-2023-20052](https://insights.sbomify.com/CVE-2023-20052/): XML external entity in Cisco Secure Endpoint (medium 5.3)
- [CVE-2023-20051](https://insights.sbomify.com/CVE-2023-20051/): Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability (medium 5.8)
- [CVE-2023-20050](https://insights.sbomify.com/CVE-2023-20050/): Cisco NX-OS Software CLI Command Injection Vulnerability (medium 4.4)
- [CVE-2023-2005](https://insights.sbomify.com/CVE-2023-2005/): Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability (medium 6.3)
- [CVE-2023-20049](https://insights.sbomify.com/CVE-2023-20049/): Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability (high 8.6)
- [CVE-2023-20048](https://insights.sbomify.com/CVE-2023-20048/): Missing authorization in Cisco Firepower Management Center (critical 9.9)
- [CVE-2023-20047](https://insights.sbomify.com/CVE-2023-20047/): Denial of service in Cisco Webex Room Phone (medium 6.5)
- [CVE-2023-20046](https://insights.sbomify.com/CVE-2023-20046/): Auth bypass in Cisco ASR 5000 Series Software (high 8.8)
- [CVE-2023-20045](https://insights.sbomify.com/CVE-2023-20045/): Command injection in Cisco Small Business RV Series Router Firmware (medium 4.9)
- [CVE-2023-20044](https://insights.sbomify.com/CVE-2023-20044/): Privilege escalation in Cisco CX Cloud Agent (medium 6.7)
- [CVE-2023-20043](https://insights.sbomify.com/CVE-2023-20043/): Privilege escalation in Cisco CX Cloud Agent (medium 6.7)
- [CVE-2023-20042](https://insights.sbomify.com/CVE-2023-20042/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (medium 6.8)
- [CVE-2023-20041](https://insights.sbomify.com/CVE-2023-20041/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2023-20040](https://insights.sbomify.com/CVE-2023-20040/): Path traversal in Cisco Network Services Orchestrator (medium 5.5)
- [CVE-2023-20039](https://insights.sbomify.com/CVE-2023-20039/): Cisco Industrial Network Director File Permissions (medium 5.5)
- [CVE-2023-20038](https://insights.sbomify.com/CVE-2023-20038/): Hardcoded credentials in Cisco Industrial Network Director (high 8.8)
- [CVE-2023-20037](https://insights.sbomify.com/CVE-2023-20037/): Cross-site scripting in Cisco Industrial Network Director (medium 5.4)
- [CVE-2023-20036](https://insights.sbomify.com/CVE-2023-20036/): Cisco Industrial Network Director Command Injection Vulnerability (critical 9.9)
- [CVE-2023-20035](https://insights.sbomify.com/CVE-2023-20035/): Cisco IOS XE SD-WAN Software Command Injection Vulnerability (high 7.8)
- [CVE-2023-20034](https://insights.sbomify.com/CVE-2023-20034/): Hardcoded credentials in Cisco SD-WAN vManage (high 7.5)
- [CVE-2023-20033](https://insights.sbomify.com/CVE-2023-20033/): Denial of service in Cisco IOS XE Software (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/410/